Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
File: njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft (raw, json)
Hash identifier: 4Iks+fl5UW+aUeejSAnE2S24AFTY67TqFhxlROfuN5I=
Subject key identifier: 55:A3:A0:49:74:12:0A:E7:10:80:A6:89:E6:7C:7F:CE:C0:DC:6F:2D
Authority key identifier: 9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
Certificate issuer: /CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Certificate serial: 019A51514BC05DC3217AC61F433029829E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 00:01:13 +0000
Manifest this update: Wed 05 Nov 2025 00:01:13 +0000
Manifest next update: Thu 06 Nov 2025 00:01:13 +0000
Files and hashes: 1: Ssu8zhZouqLFw7AaAzwD8Rhb4ss.roa (hash: Wj2iWFYhEk6j27Vf/+D9hzlZqUC3iOCSrZa2VvDKOhs=)
2: njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl (hash: 37ym9o0+F4LGI2uJBq0XA6FzCQRknbisOhmmEeCcCKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:51:4b:c0:5d:c3:21:7a:c6:1f:43:30:29:82:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e32aef0067c4f0ba20ee6663440005b1b3b887b
Validity
Not Before: Nov 5 00:01:13 2025 GMT
Not After : Nov 6 00:01:13 2025 GMT
Subject: CN=55a3a04974120ae71080a689e67c7fcec0dc6f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:a5:b7:d3:aa:35:0d:c4:80:32:88:e0:0d:
03:e7:fd:4c:eb:e8:c0:7f:e1:97:c5:56:a0:d3:0e:
fd:a2:58:2c:bf:40:27:a8:98:94:87:14:37:36:43:
54:05:03:d2:04:a5:e9:84:5e:0d:0b:0b:e8:dc:eb:
32:ab:ee:5f:dc:7c:bd:ea:68:a2:29:6c:bf:1b:7b:
5f:ad:d9:be:1a:3d:05:d1:42:30:e5:5e:98:ed:ce:
99:78:2b:da:96:f8:6b:13:52:d7:73:e6:3b:09:02:
0b:da:ab:66:61:47:b6:2d:89:dc:e8:35:9f:a2:fc:
7e:e6:8f:36:9a:61:8c:6b:03:fa:ba:48:de:0e:39:
e1:78:8d:3a:33:f3:af:68:b2:c9:79:93:4b:73:36:
65:3b:ae:43:97:1a:c5:ed:27:b5:ca:d7:56:57:61:
74:c3:f3:56:51:eb:88:cf:77:a9:9c:ea:c5:97:46:
6d:27:1e:38:78:09:d8:08:94:6d:20:87:5b:0c:34:
dc:fd:b2:73:14:1a:73:6a:b6:1e:96:22:f1:b7:b5:
a0:de:ea:1b:3c:61:25:10:49:51:18:42:62:ac:59:
af:d2:c3:82:93:ed:75:7b:a0:59:f4:71:58:a4:0f:
3b:f1:15:2d:92:a8:98:bd:4c:9f:b5:c6:71:79:24:
5d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A3:A0:49:74:12:0A:E7:10:80:A6:89:E6:7C:7F:CE:C0:DC:6F:2D
X509v3 Authority Key Identifier:
keyid:9E:32:AE:F0:06:7C:4F:0B:A2:0E:E6:66:34:40:00:5B:1B:3B:88:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njKu8AZ8TwuiDuZmNEAAWxs7iHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8c2874-ebba-4c77-96c6-c31c6d8691d0/1/njKu8AZ8TwuiDuZmNEAAWxs7iHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e9:8a:af:e3:6f:85:2b:bf:7d:56:f3:06:6e:f3:03:48:c2:
50:6c:db:da:1b:c6:c9:ec:9f:29:a1:ec:02:03:a1:c1:ef:bc:
4d:65:83:77:fc:17:51:33:a3:4f:2c:1e:c2:c3:de:9d:31:e0:
c6:f2:13:d6:25:a8:ae:c4:77:a1:e4:ae:6e:d7:0d:7b:97:2a:
2d:8f:69:63:4b:e6:d8:44:00:6c:22:b8:ad:e5:d1:a5:3b:b5:
36:11:8a:b1:94:6e:dd:67:0b:3b:3b:50:aa:e4:92:79:92:8b:
3f:5e:1d:f7:6c:91:e3:3c:e7:d6:6a:28:31:ef:9d:bb:64:0e:
b0:7b:84:c3:32:9d:07:38:ad:57:26:3d:21:71:69:70:f1:63:
a0:64:ac:14:74:d7:23:1c:68:62:e8:de:9c:c2:50:0f:3f:36:
43:77:65:5c:da:8a:a8:85:e4:02:df:12:0f:a5:ab:e4:21:1c:
ee:8f:37:83:e5:5c:6e:c0:f5:a6:2d:ce:22:41:e3:94:ea:c5:
7f:9c:2c:16:47:fb:38:03:3f:ce:c7:33:c4:2a:96:20:a9:2d:
fe:85:a7:17:98:5a:76:e8:89:29:c0:76:fe:24:b0:db:c3:2e:
23:dc:4a:a7:c2:f5:2f:62:15:76:65:0f:4e:76:de:35:81:ee:
f4:62:e8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:53 2025 by rpki-client